Report  Documentation  Page 


Form  Approved 
0MB  No.  0704-0188 


Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  0MB  control  number. 


1.  REPORT  DATE 

JUL  2007 


2.  REPORT  TYPE 


3.  DATES  COVERED 

00-00-2007  to  00-00-2007 


4.  TITLE  AND  SUBTITLE 

Enabling  Technologies  for  Net-Centricity  -  Information  on  Demand 


6.  AUTHOR(S) 


7.  PEREORMING  ORGANIZATION  NAME(S)  AND  ADDRESS(ES) 

Department  of  Defense  Chief  Information  Officer, 6000  Defense 
Pentagon, Washington, DC, 20301 


5a.  CONTRACT  NUMBER 


5b.  GRANT  NUMBER 

5c.  PROGRAM  ELEMENT  NUMBER 

5d.  PROJECT  NUMBER 


5e.  TASK  NUMBER 


5f.  WORK  UNIT  NUMBER 

8.  PERFORMING  ORGANIZATION 
REPORT  NUMBER 


9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS(ES) 


10.  SPONSOR/MONITOR’S  ACRONYM(S) 


11.  SPONSOR/MONITOR’S  REPORT 
NUMBER(S) 


12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited 

13.  SUPPLEMENTARY  NOTES 

CROSSTALK  The  Journal  of  Defense  Software  Engineering,  July  2007 

14.  ABSTRACT 


15.  SUBJECT  TERMS 


16.  SECURITY  CLASSIFICATION  OF: 

17.  LIMITATION  OF 
ABSTRACT 

18.  NUMBER 
OE  PAGES 

19a.  NAME  OE 

RESPONSIBLE  PERSON 

a.  REPORT 

unclassified 

b.  ABSTRACT 

unclassified 

c.  THIS  PAGE 

unclassified 

Same  as 
Report  (SAR) 

3 

Standard  Form  298  (Rev.  8-98} 

Prescribed  by  ANSI  Std  Z39-18 


Enabling  Technologies  for  Net-Centricity 


Enabling  Technologies  for  Net-Centricity  - 
Information  on  Demand 


The  Honorable  John  J.  Grimes 
Department  of  Defense  Chief  Information  Officer 

The  focus  of  net-centric  operations  is  to  provide  a  more  effective  and  efficient  force  that  includes  the  warfighter,  the  intelligence 
community,  and  the  business  processes  that  support  and  enable  the  warfighters’  success.  The  ability  to  access  information,  to 
share  that  information,  and  to  collaborate  with  others  is  at  the  heart  of  net-centric  operations.  The  ongoing  tranfiormation 
represents  a  fundamental  change,  a  strategy  that  requires  a  cultural  shift  regarding  how  information  and  information  tech¬ 
nology  is  viewed  and  used. 


We  live  in  a  new  era.  The  relative  pre¬ 
dictability  of  the  Cold  War  is  gone. 
As  the  National  Defense  Strategy  [1] 
states:  Uncertainty  is  the  defining  characteristic 
of  today’s  strategic  environment.  The  strategy 
emphasizes  that  we  will  not  know  whom 
we  will  fight,  nor  when,  nor  where,  nor 
how.  As  a  military,  and  as  a  nation,  we 
must  confront  uncertainty  with  agility. 
Our  response  to  unpredictable,  unantici¬ 
pated,  and  unknown  security  challenges  of 
today  and  tomorrow  must  be  to  ensure 
levels  of  agility  never  before  considered 
and  never  before  possible. 

To  support  the  warfighter  in  this 
changing  threat  environment,  the 
Department  of  Defense  (DoD)  is  trans¬ 
forming  by  leveraging  the  power  of  infor¬ 
mation.  Information  and  the  ability  to 
access  it,  share  it,  and  collaborate  it  with 
others  is  at  the  heart  of  net-centric  opera¬ 
tions.  The  recent  Quadrennial  Defense 
Review  (QDR)  [2],  reinforced  the  impor¬ 
tance  of  achieving  net-centricity  and 
called  for  15  major  information  technolo¬ 
gy  (IT)  and  command  and  control  initia¬ 
tives,  and  significantly  increased  efforts  to 
ensure  information  can  be  trusted. 

The  focus  of  the  net-centric  approach 
and  activities  supports  the  DoD’s  trans¬ 
formation  and  the  QDR  goals:  to  provide 
a  more  effective  and  efficient  force.  That 
force  is  not  only  the  warfighter,  but  it  is 
also  the  intelligence  community  and  the 
business  processes  that  enable  the 
warfighters’  success.  Regardless  of  time  or 
place,  the  user  must  be  able  to  say  I  can  get 
the  information  I  need  to  perform  my  mission. 

Atop  the  particular  activities  and  pro¬ 
grams  sits  a  fundamental  change  in  philos¬ 
ophy:  It  is  aU  about  the  data.  To  success¬ 
fully  implement  a  secure  enterprise-level 
net-centric  operations  capability  for  the 
warfighter,  we  must  move  away  from 
highly  tailored  programs  that  manipulate 
data  and  move  to  exposing  the  data  in  a 
timely  fashion. 

The  ongoing  transformation  repre¬ 


sents  a  fundamental  change  in  approach  — 
that  is,  a  change  in  both  what  is  being 
done  and  how  it  is  being  accomplished. 
However,  underlying  the  new  strategy  is 
perhaps  a  far  greater  challenge.  There 
must  be  a  dramatic  cultural  shift  with 
regard  to  how  information  is  viewed  and 
used. 

Stewards,  Not  Owners 

Today,  information  is  typically  stored  in 
bins  and  silos  that  are  walled  off  from 
anyone  outside  a  particular  community. 
There  is  not  only  a  sense  of  data  owner¬ 
ship,  but  also  an  enormous  cultural  reluc¬ 
tance  to  share  with  others  outside  a  par¬ 
ticular  community.  Additionally,  existing 
systems  cannot  talk  to  each  other  without 
the  benefit  of  time-consuming,  highly  tai¬ 
lored,  costly,  pre-engineered  interfaces. 
The  approach  to  information  security  is 
not  much  different.  Everything  is  based 
on  predetermined  needs,  despite  the  fact 
that  in  today’s  world  it  is  not  possible  to 
anticipate  what  will  be  needed  nor  by 
whom. 

There  must  be  a  complete  overhaul 
in  how  information  is  considered. 
Instead  of  the  parochial  attitude  that 
information  is  power,  we  must  move  to  a 
culture  that  embraces  and  leverages  the 
power  of  information.  That  rearrangement 
of  words  is  not  a  subtlety  but  the  reflec¬ 
tion  of  a  dramatically  different  culture 
and  environment.  The  regulatory 
demands  of  need  to  know  must  be  met. 
However,  the  culture  must  shift  away 
from  over-interpretation  of  the  require¬ 
ment  and  place  greater  emphasis  on 
understanding  who  else  would  benefit  by 
having  the  information  accessible.  The 
enterprise  must  make  authorized  infor¬ 
mation  sharing  a  priority.  The  impor¬ 
tance  of  need  to  share  and,  more  impor¬ 
tantly,  right  to  know  must  be  recognized. 
An  authorized  user,  in  essence,  has  the 
right  to  know  information  that  is  critical  to 
doing  his  or  her  job.  The  ultimate  objec¬ 


tive  is  to  connect  people  with  informa¬ 
tion. 

The  DoD  Data  Strategy  concentrates 
on  realizing  the  principles  that  data  must 
be  visible,  accessible,  and  understandable 
[3].  An  authorized  and  authenticated  user 
must  be  able  to  discover  that  data  exists, 
puU  it  off  the  network,  and  use  it.  To  do 
so  requires  tagging  of  all  data  with  metada¬ 
ta  and  enterprise-wide  registries  to  enable 
discovery  by  users.  Communities  of  inter¬ 
est  are  forming  across  a  wide  variety  of 
areas,  including  Maritime  Domain 
Awareness,  which  has  improved  the  ability 
to  share  information  across  the  breadth  of 
military,  federal,  state,  local,  and  private 
organizations,  increasing  the  security  of 
our  harbors  and  ports. 

We  must  become  stewards,  not  own¬ 
ers,  of  information. 

Enterprise,  Not  Stovepipe 

Today’s  data  silos  support  a  mentality  in 
which  information  is,  quite  frankly,  hidden 
and  hoarded  rather  than  visible  and 
shared.  Dealing  with  the  unanticipated 
demands  the  latter.  As  the  people, 
processes,  and  technology  of  the  net-cen¬ 
tric  Global  Information  Grid  (GIG) 
mature,  the  goal  of  sharing  information 
must  serve  as  the  guiding  vision.  The  chal¬ 
lenge  is  to  design,  engineer,  and  create  an 
information  environment  rather  than 
focus  on  platforms  and  systems  alone. 

The  approach,  therefore,  is  to  success¬ 
fully  introduce  and  continually  evolve  the 
GIG  through  enterprise-wide  system 
engineering  —  not  tailored  stovepipes.  This 
effort  sets  the  path  that  the  rest  of  the 
enterprise  can  easily  follow  by  establishing 
enterprise-wide  technical  baselines,  analy¬ 
sis  capabilities,  and  compliance  manage¬ 
ment.  In  short,  emphasis  must  be  placed 
on  the  whole  enterprise  and  the  founda¬ 
tion  upon  which  it  will  support  the  full 
range  of  future  users. 

We  must  develop  the  net-centric  GIG 
as  an  enterprise,  not  stovepipes. 
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Services,  Not  Systems 

Today’s  world  is  focused  on  systems.  That 
is,  programs  that  retrieve  and  manipulate 
data  are  typically  developed  according  to 
very  specific  and  highly  tailored  require¬ 
ments.  Each  organization  or  function 
tends  to  pursue  its  own  needs.  The  result 
has  been  a  bevy  of  systems  that  not  only 
cannot  communicate  with  each  other  but 
do  not  even  use  the  same  language.  The 
proprietary  applications  currendy  in  use 
are  not  open,  not  easily  changed,  and  not 
transferable  to  other  needs. 

Services-Oriented  Architecture  (SOA) 
is  the  key  to  transformation  in  an  age  of 
shared  information  needs.  Specifically, 
SOA  supports  an  information  environ¬ 
ment  built  upon  loosely  coupled,  reusable, 
standards-based  services.  It  promotes  data 
interoperability  rather  than  application 
interoperability.  SOA  ensures  providers 
can  reuse  what  already  exists  -  that  is, 
pieces  of  applications  and  data  rather  than 
re-create  them  every  time.  Moreover,  it 
allows  new  capabilities  to  be  delivered 
more  quickly.  The  practice  of  buying  indi¬ 
vidual,  highly  tailored,  proprietary  systems 
must  end.  We  must  place  a  new  focus  on 
separating  data  from  applications  for  use 
within  and  across  the  Enterprise 
Information  Environment  (EIE) . 

The  second  key  to  success  is  leverag¬ 
ing  commercially  managed  services.  The 
EIE  win  provide  commonly  available  core 
services  -  that  is,  services  commonly 
needed  by  a  wide  range  of  users.  Services 
are  required  to  access,  manipulate,  share, 
and,  most  importantly,  collaborate  data. 
They  must  be  viewed  as  resources  to  man¬ 
age  rather  than  applications  to  own. 
Unnecessary  duplication  of  services  read¬ 
ily  available  in  the  marketplace  must  end. 
Buying  things  must  be  replaced  with  ser¬ 
vices  purchased  and  billed  based  on  usage. 
Simply  put,  the  DoD  will  not  develop, 
own,  run,  or  install  every  service  it  might 
need.  The  Net-Centric  Enterprise 
Services  program  under  way  at  Defense 
Information  Systems  Agency  (DISA)  is 
key  to  how  we  are  changing. 

We  must  concentrate  on  services,  not 
systems. 

Portfolios,  Not  Programs 

Finally,  there  is  a  fundamental  change  in 
the  management  and  oversight  of  the 
many  efforts  involved  in  this  transforma¬ 
tion.  It  is  a  change  that  is  understood  con¬ 
ceptually  and  its  importance  is  under¬ 
stood,  but  the  actual  implementation  is 
sttU  being  sorted  out.  The  2006  QDR  took 
steps  to  move  us  from  threat-based  acqui¬ 
sitions  to  a  capability-based  environment. 


In  a  world  of  unknown  challenges  and 
unanticipated  needs  and  partners,  focus¬ 
ing  on  capabilities  is  essential.  The  theory 
is  on  target,  but  the  execution  is  tricky. 

Traditionally,  the  acquisition  environ¬ 
ment  has  been  viewed  as  a  collection  of 
programs  and  systems  -  that  is,  individual 
activities  that  lead  to  a  specific  product. 
Over  time,  the  concept  of  systems  of  sys¬ 
tems  developed.  Regardless  of  terminolo¬ 
gy,  the  emphasis  was  stiU  oriented  on 
delivering  physical  platforms  or  lines  of 
code.  There  has  been  a  tendency  to  create 
tidy  packages  that  could  more  easily  be 
managed  -  despite  the  fact  that  the  rela¬ 
tionship  of  the  many  packages  to  the 
warfighter’s  needs  remained  fundamental¬ 
ly  unclear. 

Net-centric  operations  will  require 
bringing  individual  programs  under 
umbrellas  that  represent  actual  and  com¬ 
plete  capabilities.  The  QDR  initiated  four 
Capability  Portfolio  Management  (CPM) 
test  cases.  The  CPMs  not  only  puU  related, 
integrated,  and  synergistic  programs 
under  a  common  management  frame,  but 
also  consider  whether  or  not  there  are 
duplications  to  mediate  or  legacy  pro¬ 
grams  to  cut.  The  process  offers  the  abili¬ 
ty  to  look  at  the  whole  rather  than  strug¬ 
gle  to  determine  if  there  should  be  a  con¬ 
nection  between  the  parts. 

In  September  of  2006,  the  Deputy 
Secretary  of  Defense  (DepSecDef)  signed 
a  memo  articulating  the  ultimate  objective 
of  the  CPM  test  cases:  ensuring  the  ability  to 
deliver  a  capability  portfolio  aligned  with  strategic 
intent.  In  addition  to  that  overall  guidance 
on  CPM,  the  leadership  now  regularly 
reviews  progress  through  the 
DepSecDef’s  Advisory  Working  Group. 
The  National  Information  Infrastructure/ 
Chief  Information  Officer  (CIO)  shares 
primary  responsibility  for  the  Joint  Net- 
Centric  Operations,  and  the  Joint 
Command  and  Control  test  cases. 
Preliminary  results  from  both  have  led  to 
issue  papers  that  are  currently  being 
reviewed  by  Program  Analysis  and 
Evaluation.  The  final  two  test  cases,  which 
the  DoD  also  supports,  are  Joint 
Battiespace  Awareness  and  Joint  Logistics. 
These  CPM  test  cases  are  consistent  with 
the  DoD  policy  on  IT  portfolio  manage¬ 
ment.  By  focusing  on  capabilities  needed, 
rather  than  programs  funded,  the  needs  of 
the  warfighter  are  better  met. 

We  must  manage  by  portfolios,  not 
programs. 

Challenges  Ahead 

Much  of  what  must  be  done  is  well  under¬ 
stood,  but  many  areas  and  needs  have  yet 
to  be  invented.  Many  challenges  lie  ahead. 


Establishing  an  information  sharing 
culture  is  critical;  making  it  happen  is 
equally  critical.  Cross-domain  solutions 
are  one  of  those  challenges.  Specifically, 
the  movement  of  information  across 
domains,  both  vertical  and  horizontal, 
must  be  addressed.  Whether  crossing 
organizational  boundaries  and  moving 
information  horizontally  or  maneuvering 
security  levels  and  moving  information 
vertically,  the  ability  to  leverage  informa¬ 
tion  throughout  the  national  security  com¬ 
munity  is  essential. 

Information  Assurance  (lA),  another 
key  area  of  focus  in  the  QDR,  is  the  basis 
for  timely  and  trusted  information.  The 
threat  is  real.  It  is  here,  it  is  now,  it  is  per¬ 
sistent,  and  it  is  maturing.  Most  important¬ 
ly,  we  must  change  our  approach.  Security 
approaches  must  move  from  fences  and 
patches  that  keep  intruders  out  and 
toward  data  that  is  secure  throughout  its 
useful  lifetime  —  secure  from  the  start.  lA 
is  one  of  the  most  complex  and  important 
aspects  of  information  sharing. 

The  lA  Component  of  the  GIG  Integrated 
Architecture  [4],  originally  released  in  late 
2004,  provides  the  strategy  and  the  way 
ahead.  It  focuses  on  five  goals  covering  pro¬ 
tection  and  defense  and  creating  the  right 
workforce.  It  also  includes  a  robust  and 
growing  identity  management  effort, 
including  the  issuance  of  more  than  10  mil¬ 
lion  common  access  cards  (CAC)  and  a 
requirement  from  the  Joint  Task  Force- 
Global  Network  Operations  for  CAC  log-in 
with  Public  Key  Infrastructure  certificates. 

There  is  yet  another  critical  challenge  — 
creating  a  Net-Enabled  Command  Capa¬ 
bility  (NECC).  In  addition  to  moving  away 
from  the  current  Global  Command  and 
Control  System  family  of  systems,  this 
effort  win  also  require  a  significant  change 
in  both  mindset  and  approach.  It  will 
require  moving  from  a  static  system  and 
program-based  acquisition  environment  to 
one  that  is  dynamic  and  capabilities  based. 
Also,  it  win  change  the  current  approach  of 
pushing  information  to  users,  and  instead 
win  enable  users  to  puU  what  they  need  and 
to  contribute  what  they  know.  Instead  of 
multiple  architectures,  it  wiU  be  based  on  a 
single  architecture.  Perhaps  most  impor¬ 
tantly,  there  win  be  a  move  from  being  plat¬ 
form  specific  and  system  driven,  to  plat¬ 
form  independent  and  capable  of  dynami- 
cany  meeting  user  needs. 

As  with  many  other  aspects  of  the 
transformation,  there  are  plenty  of  chal¬ 
lenges  for  NECC  in  the  months  and  years 
ahead.  However,  a  program  executive 
office  has  been  estabUshed  at  DISA  and 
an  early  2006  Acquisition  Decision 
Memorandum  Exit  Criteria  was  estab- 
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Ushed.  Progress  is  indeed  being  made. 

There  are  many  other  challenges  that 
lie  ahead.  Most  will  require  the  innovative 
thinking  that  is  best  reflected  by  a  sense  of 
partnership  with  industry,  academia,  and 
technical  associations.  Success  will  be 
based  on  the  ability  to  establish  teams  that 
are  excited  by  the  challenge,  are  ready  to 
pursue  new  ideas,  and  can  make  things 
happen. 

Summary 

Information  is  a  strategic  asset.  It  is  every 
bit  as  important  as  ships  sailed,  planes 
flown,  and  troops  commanded,  and,  as  an 
instimtion  and  a  country,  we  must  treat  it 
as  such. 

Becoming  net-centric  is  not  about 
replacing  the  warfighter  with  technology. 
We  will,  for  example,  still  need  boots  on 
the  ground.  Net-centric  operations  will 
allow  humans  to  leverage  information  to 
better  deal  with  unanticipated  challenges, 
needs,  partners,  and  circumstances. 

Becoming  net-centric  means  ensuring 
information  is  accessible  throughout  the 
enterprise  from  high-level  headquarters  and 
command  centers  to  a  soldier  in  a  city  track¬ 
ing  insurgents  to  a  civilian  at  a  depot  in 
search  of  a  new  supplier.  It  centers  on  the 
knowledge  that  timely  and  trusted  informa¬ 
tion  can  be  shared  with  those  who  need  it, 
whether  alone  or  as  a  collaboration  in 
groups. 

Most  importantly,  becoming  net-cen¬ 
tric  will  allow  the  community  to  truly 
move  to  an  information  environment  in 
which  all  participants,  known  and  unantic¬ 
ipated,  have  confidence  that  they  can  get 
the  information  they  need  and  they  trust. 

In  the  end,  it  comes  down  to  a  simple 
objective,  one  that  is  dear  to  our  nation  - 
saving  lives.  As  we  move  into  the  future 
and  deliver  these  capabilities  to  users 
across  the  enterprise,  we  must  move  as  a 
team  -  a  team  that  has  a  lot  of  challeng¬ 
ing,  yet  very  rewarding,  work  ahead.  And 
I,  for  one,  am  looking  forward  to  the  jour¬ 
ney.  ♦ 
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Director  for  National  Security  Telecom¬ 
munications  Policy;  Director  of  Defense 
Command,  Control  and  Communications 
Programs;  and  Senior  Director  White 
House  Situation  Support  Staff  He  served 
as  Deputy  Assistant  Secretary  of  Defense 
for  Defense-wide  Command,  Control,  and 
Communications  and  was  the  Deputy  As¬ 
sistant  Secretary  of  Defense  for  Counter¬ 
intelligence  and  Security  Countermea¬ 
sures.  As  a  member  of  the  DoD  senior 
executive  service.  Grimes  held  senior  tech¬ 
nical  and  staff  positions  with  the  National 
Communications  System;  Defense  Com¬ 
munications  Agency;  and  the  U.S.  Army 
Communications  Command  following  his 
military  service  in  the  U.S.  Air  Force. 
Previously  with  Raytheon,  he  served  as 
Vice  President  of  Intelligence  and 
Information  Systems,  Washington  Oper¬ 
ations.  Grimes  has  served  on  four  Defense 
Science  Board  Task  Forces  and  was  a 
member  of  the  Industry  Executive  Sub¬ 
committee  of  the  President’s  National 
Security  Telecommunications  Advisory 
Committee.  Grimes  is  a  graduate  of  the 
University  of  Arizona,  and  has  a  master’s 
degree  from  Shippensburg  University  in 
Pennsylvania.  He  is  a  graduate  of  the  U.S. 
Army  War  College,  Carlisle  Barracks, 
Pennsylvania;  the  Federal  Executive  Insti¬ 
tute,  Charlottesville,  Virginia;  and  Harvard 
University’s  National  and  International 
Security  Policy  program.  He  is  the  recipi¬ 
ent  of  the  American  Institute  of  Aero¬ 
nautics  and  Astronautics’  Command, 
Control,  Communications,  and  Intelli¬ 
gence  award  among  other  public,  military 
and  federal  civil  service  awards,  including 
two  Presidential  Rank  awards. 
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